summaryrefslogtreecommitdiffstats
path: root/src/appl
Commit message (Collapse)AuthorAgeFilesLines
...
* * configure.in, Makefile.in: only link getdtablesize.o if neededTom Yu1996-06-033-2/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8205 dc483132-0cff-0310-8789-dd5450dbe970
* Use secure context for loginSam Hartman1996-05-232-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8116 dc483132-0cff-0310-8789-dd5450dbe970
* krlogind.c krshd.c:Richard Basch1996-05-094-1/+63
| | | | | | | | | Use the default service principal as the basis for the rcache name. login.c: SVR4 systems typically do not do mail/motd checks in login; they do it in the profiles (/etc/profile). Follow that convention... git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7951 dc483132-0cff-0310-8789-dd5450dbe970
* Use the default service principal (don't assume it is "host") as theRichard Basch1996-05-092-1/+6
| | | | | | basis for the replay cache name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7950 dc483132-0cff-0310-8789-dd5450dbe970
* cygnus merge:Ken Raeburn1996-05-028-64/+156
| | | | | | | | | | | | | | | | | | | | | | | | | * configure.in: Fix typo in Apr 16 HP-UX change. * state.c (envvarok): nuke all KRB5* environment variables, not just the previously selected ones. * telnetd.c (telnet -> doit): moved SIGTTOU handler before the first thing which would cause the terminal driver to get upset. * sys_term.c (line): Remove initialization silliness. The non-GNUC method was Just Wrong, do it the other way always. (Xline): Specify length, not contents. * termio-tn.c (readstream_termio): new file, provides isolated version of M_IOCTL handling for systems where termio and termios can't be compiled together. * termios-tn.c (readstream_termios): new file, provides isolated version of M_IOCTL handling for systems where termio and termios can't be compiled together. * telnetd.c (readstream): use readstream_termios and readstream_termio to handle getmsg with M_IOCTL. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7883 dc483132-0cff-0310-8789-dd5450dbe970
* Merge with Cygnus sources, changes from Mark Eichin, Marc Horowitz, ChrisKen Raeburn1996-05-0113-629/+1547
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provenzano and me: * Makefile.in (install): Install correct set of man pages, and check for failures. * kshd.M, klogind.M: Renamed from kr*.M versions. * login.M: New file. Man page for login with some description of new features. * rlogin.M: Remove references to using program with target hostname as argv[0]. * rsh.M: Ditto. Also document -f, -F, -x options. * login.c: Massive changes. Split much functionality out of main and into separate file sections: terminal flag settings, Kerberos 4 and 5 support, UNIX password support, mail check, signal handler handling, some other support routines. Revamp controlling tty and process group handling. For AFS configuration, use setpag and run aklog. Try validating password using krb5. Always set tty flags, not just for rlogin session. When validating tickets, treat an existing key file that doesn't contain the key we think we want (possibly because DNS was spoofed) as an error condition. * Makefile.in (LOGINLIBS): List libkrb524.a here. (LIBOBJS): Not here. (login.krb5): Reverse the order of LIBOBJS and LOGINLIBS. * configure.in: Check for --with-afs. Add AFS libs and define SETPAG if supplied. * login.c (KRB5_GET_TICKETS, KRB4_GET_TICKETS, KRB_RUN_AKLOG): new macros selecting single signon options. krb5.conf profile support for control over authentication options, above the compile time selection. (conf_affirmative): new function, recognize yes/no in profile value. (login_get_kconf): new function, look for all [login] flags and set them in appropriate globals (via login_conf_set array.) (main, sleepexit, destroy_tickets): Check the new login_* flags. (main): rename KRB4_USE_524 to KRB4_CONVERT. * configure.in: Added checks for tcsetpgrp, tcgetpgrp, setpgid. * krlogind.c (control): Use tcgetpgrp if it's available. * loginpaths.h (RPATH, LPATH, LPATH_root): Define HP/UX 9.04 versions, conditionalized on __hpux and !hpux. * login.c and configure.in: instead of checking _IBMR2 and __sgi__, write configure tests to check for the existence of /etc/environment and /etc/TIMEZONE files, respectively. * forward.c (rd_and_store_for_creds) : If chown fails then only pass failure back if owner is different than intended owner. This is to make rsh.exp test work without requiring root privlidges. * login.c (main): Don't set TERM to an empty value. (stypeof) [__hpux]: Return null if unknown. * krlogin.c (catchild): remove hp/ux kludge because of aclocal.m4 fix. (speeds): test __hpux for hpux speed list. (main): test __hpux for use of FIOSSAIOSTAT and FIOSSAIOOWN (USE_TERMIO): test __hpux for bsdtty/ptyio headers. * krlogind.c: test __hpux for bsdtty/ptyio headers. (doit): test __hpux for use of setpgrp2. * krcp.c (main): test __hpux as well for remsh vs. rsh. * krcp.c (des_write): Make sure the buffer for the encrypted data is large enough. Only return an error in malloc fails. * krsh.c (main): Always turn on anyport -A option. * krlogind.c (ptsname): Declare if it's going to be used. * krshd.c (main): Use basename of argv[0] for progname. * login.c (dofork): On linux, TIOCNOTTY causes us to die on a SIGHUP, so don't even try it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7881 dc483132-0cff-0310-8789-dd5450dbe970
* hpux is unix. really, it isKen Raeburn1996-05-012-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7880 dc483132-0cff-0310-8789-dd5450dbe970
* previously checked-in changesKen Raeburn1996-05-011-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7879 dc483132-0cff-0310-8789-dd5450dbe970
* login man page by mark eichinKen Raeburn1996-04-292-0/+70
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7864 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (install): Install correct set of man pages, and check forKen Raeburn1996-04-294-7/+17
| | | | | | | failures. * kshd.M, klogind.M: Renamed from kr*.M versions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7863 dc483132-0cff-0310-8789-dd5450dbe970
* The rd_req has to allow any local service principal, as the host may haveRichard Basch1996-04-282-21/+30
| | | | | | multiple names and multiple "host" keys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7861 dc483132-0cff-0310-8789-dd5450dbe970
* Whitespace cleanupRichard Basch1996-04-251-8/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7858 dc483132-0cff-0310-8789-dd5450dbe970
* One could not specify -c in inetd.conf, because of theRichard Basch1996-04-222-10/+12
| | | | | | | variable initialization; initialization has been corrected to allow either checksumming or ignoring the checksum. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7855 dc483132-0cff-0310-8789-dd5450dbe970
* * krshd.c: If checksumming is required & ALWAYS_V5_KUSEROK isRichard Basch1996-04-212-6/+18
| | | | | | | | defined, incorrect messages were being displayed for V4 clients. Additionally, various errors were not being displayed with the trailing newline. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7852 dc483132-0cff-0310-8789-dd5450dbe970
* * Remove documentation of how krlogind gets its command line optionsSam Hartman1996-04-215-33/+110
| | | | | | | | | | | | | | from its name, because it doesn't any more. Same for kshd. * Document and implement -i option to ignore checksums. Restore default mode to accept and process checksums if provided. * Bring back the warning about only using -c with Kerberos5. The documentation (both install.texi and the man pages) clearly state that the -c option shouldnot be used in conjunction with Kerberos4, so warn users if they try. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7849 dc483132-0cff-0310-8789-dd5450dbe970
* Fix typo in last night's commitSam Hartman1996-04-191-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7845 dc483132-0cff-0310-8789-dd5450dbe970
* Add Doug Engert's patches to dealSam Hartman1996-04-193-20/+64
| | | | | | | | | with vendor logins and packet mode on systems that don't support it. Also, clean up spaces in Makefile.in, replacing with tabs. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7844 dc483132-0cff-0310-8789-dd5450dbe970
* More option handling changesSam Hartman1996-04-182-3/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7839 dc483132-0cff-0310-8789-dd5450dbe970
* configure.in (LOGINLIBS): Remove DECLARE_SYS_ERRLIST since it's noTheodore Tso1996-04-175-299/+236
| | | | | | | | | | | | | | | | | | | | | | | | | | | | longer necessary. krcp.c (verifydir, allocbuf, rsource, source, sink): Don't use sys_errlist[]; just call error_message() instead, since we depend on com_err anyway. krshd.c (recvauth): krlogind.c (recvauth): Don't actually check the checksum unless it is required. Old (pre-beta 5) clients sent a checksum of random garbage (such as their pid) which is impossible to actually check on the server side. (Grad student stupidity strikes again.) (fatalperror): Don't use sys_errlist[] to get the right error message; just depend on com_err instead, since we're using it anyway. krshd.c (doit): krlogind.c (do_krb_login): Fix logic so that if checksums are required, and the checksum is valid, don't syslog the stupid warning message about "Checksums are only required for v5 clients...." krcp.c, krshd.c, krlogind.c: Miscellaneous -Wall cleanups krlogind.c (getpty): Removed dead code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7823 dc483132-0cff-0310-8789-dd5450dbe970
* * Changes to not use streams on HPUXSam Hartman1996-04-165-2/+37
| | | | | | | | * Changes to abort the session if telnetd receives certain options such as environment or DISPLAY options before authentication and encryption is negotiated or not negotiated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7818 dc483132-0cff-0310-8789-dd5450dbe970
* Drop support for option names in argv[0]Sam Hartman1996-04-165-66/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7817 dc483132-0cff-0310-8789-dd5450dbe970
* Remove setpgrp() call from krlogindSam Hartman1996-04-153-10/+20
| | | | | | | | | as libpty deals. Use setsid() instead of setpgrp() in krshd if possible. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7812 dc483132-0cff-0310-8789-dd5450dbe970
* Store the forwarded credentials in /tmp/krb5cc_p<pid> (like krlogind)Richard Basch1996-04-132-11/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7811 dc483132-0cff-0310-8789-dd5450dbe970
* Destroy any forwarded credentials when we cleanup. (They were stored inRichard Basch1996-04-132-1/+15
| | | | | | an unusual location, so they are not likely to be reused by other sessions.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7810 dc483132-0cff-0310-8789-dd5450dbe970
* forward.c: Use a saner naming convention for the credentials cache.Richard Basch1996-04-123-8/+45
| | | | | | kerberos5.c: Add a cleanup function to destroy the credentials cache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7799 dc483132-0cff-0310-8789-dd5450dbe970
* Call a krb5 cleanup routine to cleanup forwarded credentials, if necessaryRichard Basch1996-04-123-15/+25
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7798 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c: Cleaned up whitespace and removed commented & unused cruftRichard Basch1996-04-114-39/+35
| | | | | | | | | | | * krlogind.c, krshd.c: Allow the recvauth routine to find any key in the keytab for which the user is trying to login. The host may be known as many names. Additionally, for krlogind, clean up the error handling for bad authentication (potential null dereference and a misleading message because of the wrong authentication system being used) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7791 dc483132-0cff-0310-8789-dd5450dbe970
* some fixes changes from marc. changelogs will be merged laterMark Eichin1996-04-093-28/+47
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7760 dc483132-0cff-0310-8789-dd5450dbe970
* Add an option -L to pass an environment variable to a client.Ezra Peisach1996-04-082-10/+53
| | | | | | | This is used by the DejaGnu test suite to pass the shared library paths to start up rcp properly. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7752 dc483132-0cff-0310-8789-dd5450dbe970
* * krlogind.c: Under Solaris, when the connection pipe goes away,Richard Basch1996-04-032-1/+9
| | | | | | | | | zero bytes are returned. Since we are using blocking read calls, and the net_read function deals with interrupted/resumed reads, consider zero bytes to be be a terminated connection, so as not to spin. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7749 dc483132-0cff-0310-8789-dd5450dbe970
* Leading/trailing colons should not be there based on the variable usage.Richard Basch1996-04-012-17/+23
| | | | | | Solaris test was incorrect. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7746 dc483132-0cff-0310-8789-dd5450dbe970
* Whitespace cleanup for readabilityRichard Basch1996-04-011-12/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7745 dc483132-0cff-0310-8789-dd5450dbe970
* * telnetd.c: remove inclusion of netdb.h; it's already in defs.h,Tom Yu1996-03-272-1/+6
| | | | | | | and #$%&* ultrix doesn't protect it from multiple inclusions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7718 dc483132-0cff-0310-8789-dd5450dbe970
* Add a couple missing log entries for stuff Mark checked inKen Raeburn1996-03-251-1/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7711 dc483132-0cff-0310-8789-dd5450dbe970
* krshd.c: use the library routines to do v4 to v5 principal translationRichard Basch1996-03-252-9/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7710 dc483132-0cff-0310-8789-dd5450dbe970
* * krshd no longer does non-blocking IO. It never really needed itSam Hartman1996-03-243-7/+12
| | | | | | | | | | | * krcp works correctly even if not all data is written in a single request. * Implement temporary patch to make sure des_outbuf is big enough. Proven should be sending the Cygnus patch once he decides how to handle this permanently. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7706 dc483132-0cff-0310-8789-dd5450dbe970
* * Apply patch from Ken Raeburn to get telnetd compiling on the SGISam Hartman1996-03-246-160/+57
| | | | | | | | | | | * Force telnetd not to use streams on the SGI; it doesn't support pushing modules onto a pty. * Remove old utmpx crud from sys_term.c because it was getting called inadvertently, didn't compile on the SGI, and libpty already does something reasonable with utmpx. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7705 dc483132-0cff-0310-8789-dd5450dbe970
* use the library routines to do the v4 to v5 principal translationRichard Basch1996-03-222-8/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7698 dc483132-0cff-0310-8789-dd5450dbe970
* * kcmd.c (ruserok): declare the function as taking const char *Richard Basch1996-03-202-2/+7
| | | | | | instead of char * (Solaris 2.5 refuses to compile it, otherwise). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7672 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags which turn on the encryption optionTheodore Tso1996-03-193-3/+51
| | | | | | | | telnetd.c (getterminaltype): If the authentication option which was negotiated requires that encryption be turned on, then enforce this here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7663 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Added flags to turn on the encryption optionTheodore Tso1996-03-197-10/+102
| | | | | | | | | | | | | | | | | | | | | | | | | authenc.c (telnet_spin): Implemented the telnet spin function, which works by calling the Scheduler with the tty_lockout flag set. main.c (main): If the -x option is given, set the autologin, wantencryption, and auth_enable_encrypt flag. They enable authentication, enforcement of the encryption option, and a flag to the auth layer to negotiate authentication with mandatory encryption option. telnet.c (telnet): If the wantencryption flag is set (because the user has given the -x option, then we enforce that encryption must be turned on. The user will not be able to type to the network stream until encryption is enabled, and if encryption is refused, the client will print an error message. (Scheduler): If the tty_lockout flag is set, then don't process keyboard read events. This prevents the user from typing over the network until encryption is enabled. utilities.c (printsub): Added print support for the authentication must-encrypt option. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7662 dc483132-0cff-0310-8789-dd5450dbe970
* Mon Mar 18 20:56:37 1996 Theodore Y. Ts'o <tytso@dcl>Theodore Tso1996-03-197-113/+246
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * kerberos5.c (kerberos5_send): Send in as input the authentication type pair (ap->type, ap->way) to be checksumed in the authenticator. (kerberos5_is): If the checksum is present in the authenticator, then validate the authentication type pair against the checksum. (kerberos5_reply): If we didn't do mutual authentication, and we receive a KRB_ACCEPT, then stash away the session key anyway. This way we have a chance of doing encryption even if mutual authentication wasn't done. * encrypt.c (EncryptStartInput, EncryptStartOutput): Added conditional around printf so that these two functions can be called by the server. (encrypt_is_encrypting): New function which returns true only if both sides of the telnet stream is encrypted. Fri Mar 15 18:19:44 1996 Theodore Y. Ts'o <tytso@dcl> * auth.c: Added new authentication scheme for Krb5 mutual authentication with mandatory encryption. (auth_send, auth_send_retry): Split auth_send() so that the functionality done by auth_send_retry() is separate. This avoids a really dodgy pointer comparison which was caused by auth_send() being used for two purposes. If the client has not requested encryption, then don't use the authentication systems which require encryption. (auth_must_encrypt): New function which returns whether or not encryption must be negotiated. * auth-proto.h: Added prototype for new option auth_must_encrypt(). * Makefile.in (ENCRYPTION, DES_ENCRYPTION): Added defines to turn on encryption and des encryption. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7661 dc483132-0cff-0310-8789-dd5450dbe970
* Use AC_HEADER_STDARG and use that test to set STDARG.Ezra Peisach1996-03-199-5/+21
| | | | | | | The old test assumed that either STDARG was defined or __STDC__ - which is not sufficient. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7660 dc483132-0cff-0310-8789-dd5450dbe970
* changelogs entries from cygnus changesMark Eichin1996-03-181-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7655 dc483132-0cff-0310-8789-dd5450dbe970
* Add USE_ANAME for aname conversion dbEzra Peisach1996-03-182-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7649 dc483132-0cff-0310-8789-dd5450dbe970
* Remove declaration of krb5_kdc_default_optionsEzra Peisach1996-03-162-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7647 dc483132-0cff-0310-8789-dd5450dbe970
* * ftpd.c (auth_data): Do not fail if last gss_service is notEzra Peisach1996-03-152-2/+13
| | | | | | | present in keytab. If no services present, return a useful minor error status. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7642 dc483132-0cff-0310-8789-dd5450dbe970
* Added shadow password supportRichard Basch1996-03-153-0/+30
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7640 dc483132-0cff-0310-8789-dd5450dbe970
* telnet needs USE_ANAME because libtelnet/kerberos.c isn't splitMark Eichin1996-03-142-2/+7
| | | | | | if setupterm is in curses, grab it git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7630 dc483132-0cff-0310-8789-dd5450dbe970
* use AC_HEADER_STDARGKen Raeburn1996-03-132-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7629 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit (git 2.34.1) at 2025-09-29 16:49:10 +0000